CVE-2023-37243

CVE-2023-37243 describes a local privilege escalation vulnerability affecting Atera Agent.Package.Availability on Microsoft Windows. A standard user can exploit this by placing a malicious DLL in the C:\Windows\Temp\Agent.Package.Availability directory, which inherits permissive permissions, allowing the DLL to be executed with SYSTEM privileges upon system reboot due to DLL hijacking. With a CVSS score of 7.8 (High), this vulnerability has a low attack complexity and requires local user access, but successful exploitation can lead to full compromise of confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.